NO-07—Ingress and Egress Points: Fail Secure
>Control Description
The information system fails securely in the event of an operational failure of a boundary protection device.
Theme
Technology
Type
Preventive
Policy/Standard
Network Security Standard>Implementation Guidance
1. Ensure that appropriate fail safe procedures are defined for network boundary protection devices. 2. Ensure all network systems are configured to fail securely in the event of an operational failure.
>Testing Procedure
1. Inspect Network Security Policy/Standard to determine whether requirements have been defined that outlines that in the event of an operation failure that information systems fail securely. 2. For a sample of applicable systems review the configurations for the devices and confirm that in the event of failure that the systems will fail securely.
>Audit Artifacts
E-NO-01
E-NO-09
>Framework Mappings
Cross-framework mappings provided by Adobe CCF Open Source under Creative Commons License.
Ask AI
Configure your API key to use AI features.